CVE-2011-1082

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Linux Kernel 2.6.x - fs/eventpoll.c epoll Data Structure File Descriptor Local Denial of Service2011-03-02 · dos · linux · Verified

Impact

fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for (1) closed loops or (2) deep chains, which allows local users to cause a denial of service (deadlock or stack memory consumption) via a crafted application that makes epoll_create and epoll_ctl system calls.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e
• http://openwall.com/lists/oss-security/2011/03/02/1
• http://openwall.com/lists/oss-security/2011/03/02/2
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
• https://bugzilla.redhat.com/show_bug.cgi?id=681575
• https://lkml.org/lkml/2011/2/5/220
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=22bacca48a1755f79b7e0f192ddb9fbb7fc6e64e
• http://openwall.com/lists/oss-security/2011/03/02/1
• http://openwall.com/lists/oss-security/2011/03/02/2
• http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
• https://bugzilla.redhat.com/show_bug.cgi?id=681575
• https://lkml.org/lkml/2011/2/5/220